This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json) Hash identifier: CoE3I8NMOVSZf65YseBZq7h3nPDDBnGrsmthQTl14a0= Subject key identifier: EA:BF:15:1B:5A:8C:03:4B:C0:1C:CA:C2:C1:92:DA:AA:3D:0F:7A:00 Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23 Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23 Certificate serial: 019B5975A16699800880E1DD5E80255D5C0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft Manifest number: 0F96 Signing time: Fri 26 Dec 2025 07:00:39 +0000 Manifest this update: Fri 26 Dec 2025 07:00:39 +0000 Manifest next update: Sat 27 Dec 2025 07:00:39 +0000 Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: EEA4U5daUBBAMqWdeEpuFH8sSxeA0dF0S5j7KXHn83Q=) 2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:a1:66:99:80:08:80:e1:dd:5e:80:25:5d:5c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23 Validity Not Before: Dec 26 07:00:39 2025 GMT Not After : Dec 27 07:00:39 2025 GMT Subject: CN=eabf151b5a8c034bc01ccac2c192daaa3d0f7a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:2f:4c:9a:65:99:73:77:ca:9d:7f:1a:3f: 22:ed:28:d9:7e:8f:bc:fc:75:e4:09:cf:ec:00:4d: 08:bf:f0:8e:23:70:fb:e9:e3:10:47:9b:0a:53:9f: d3:9c:3d:3f:a0:e2:12:19:d8:9c:25:90:6e:c4:15: b3:4c:60:c4:f4:e4:2e:0a:22:b3:89:00:b3:95:2a: b3:5c:f5:7a:f6:ec:3a:4c:83:d5:bc:a7:3c:53:23: a1:a6:69:69:97:b9:52:24:d3:58:87:fe:c8:8e:c2: f6:97:fd:35:96:dd:99:3a:a2:d2:6d:ec:8e:6d:47: 24:fd:3c:d9:af:66:36:ad:ce:a5:fa:50:33:93:18: 5b:72:56:8c:6f:2b:b6:e2:71:18:6f:5b:cf:b3:8a: ba:3a:e0:e9:09:fb:3d:77:26:ed:d0:5e:52:37:92: 08:3f:e4:61:eb:80:55:fe:7a:e4:82:44:57:d6:16: 22:ee:fd:e8:e4:18:15:af:27:2c:43:e7:01:98:b5: c3:09:41:40:f3:d8:b9:fc:bd:98:93:a9:1a:68:59: 14:89:6f:2d:f3:df:77:03:2e:20:f2:c0:83:1b:29: f4:93:18:c0:08:53:ad:8b:b6:1f:2f:67:4d:83:8e: a4:57:2d:7b:e2:48:64:08:7c:8c:59:de:df:4e:69: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BF:15:1B:5A:8C:03:4B:C0:1C:CA:C2:C1:92:DA:AA:3D:0F:7A:00 X509v3 Authority Key Identifier: keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:74:64:dd:74:82:c8:67:5e:96:4a:ad:03:64:08:6b:02:5e: e6:50:f8:03:42:f9:11:b0:52:1f:f7:b8:20:0f:f6:82:cf:c7: 17:44:f3:6c:63:56:78:a6:8c:23:44:94:7e:f6:b6:a2:ee:1b: 2d:e3:1d:70:30:d8:9e:06:9a:f9:b2:11:87:7f:e5:9e:4d:19: 60:24:04:80:7d:ac:07:12:87:dd:43:21:ad:99:12:5f:2f:d7: cd:aa:36:16:6d:4c:23:97:53:87:d2:0d:c4:91:4c:a3:18:b8: 60:21:57:58:2e:a0:0c:d0:e1:97:b3:92:80:4a:56:21:77:ab: fe:0b:da:da:19:59:29:c3:89:db:40:d3:c7:3f:1e:33:48:dc: 4f:33:b5:e3:b2:96:84:e3:1a:ad:c1:8f:e7:f9:23:bb:62:2c: 84:f5:18:38:a1:33:5b:43:60:06:8d:9b:8e:cf:e9:34:56:9d: 53:b1:00:6c:0f:64:94:c9:ad:11:48:6a:31:d2:3c:97:a0:bb: bf:7c:dc:9f:6c:5a:46:42:bd:ad:2c:dc:12:83:47:1a:f9:69: 32:c9:c4:2e:b2:17:57:71:e1:c3:0c:83:a0:5b:3f:e8:00:35: 0c:4a:6c:99:98:2e:a9:81:78:72:39:da:42:36:5a:a4:80:41: f8:be:42:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdaFmmYAIgOHdXoAlXVwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmY3MGMwZWMyMTAxMGRiZDZmZTkxNWYzMzI2MzAwZmUz MTRiMjMwHhcNMjUxMjI2MDcwMDM5WhcNMjUxMjI3MDcwMDM5WjAzMTEwLwYDVQQD EyhlYWJmMTUxYjVhOGMwMzRiYzAxY2NhYzJjMTkyZGFhYTNkMGY3YTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/IvTJplmXN3yp1/Gj8i7SjZfo+8 /HXkCc/sAE0Iv/COI3D76eMQR5sKU5/TnD0/oOISGdicJZBuxBWzTGDE9OQuCiKz iQCzlSqzXPV69uw6TIPVvKc8UyOhpmlpl7lSJNNYh/7IjsL2l/01lt2ZOqLSbeyO bUck/TzZr2Y2rc6l+lAzkxhbclaMbyu24nEYb1vPs4q6OuDpCfs9dybt0F5SN5II P+Rh64BV/nrkgkRX1hYi7v3o5BgVrycsQ+cBmLXDCUFA89i5/L2Yk6kaaFkUiW8t 8993Ay4g8sCDGyn0kxjACFOti7YfL2dNg46kVy174khkCHyMWd7fTmlyfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq/FRtajANLwBzKwsGS2qo9D3oAMB8GA1UdIwQY MBaAFIUvcMDsIQENvW/pFfMyYwD+MUsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYt ZmIyMzVhZmY0NjE4LzEvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYtZmIyMzVhZmY0NjE4 LzEvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA43Rk3XSC yGdelkqtA2QIawJe5lD4A0L5EbBSH/e4IA/2gs/HF0TzbGNWeKaMI0SUfva2ou4b LeMdcDDYngaa+bIRh3/lnk0ZYCQEgH2sBxKH3UMhrZkSXy/Xzao2Fm1MI5dTh9IN xJFMoxi4YCFXWC6gDNDhl7OSgEpWIXer/gva2hlZKcOJ20DTxz8eM0jcTzO147KW hOMarcGP5/kju2IshPUYOKEzW0NgBo2bjs/pNFadU7EAbA9klMmtEUhqMdI8l6C7 v3zcn2xaRkK9rSzcEoNHGvlpMsnELrIXV3HhwwyDoFs/6AA1DEpsmZguqYF4cjna QjZapIBB+L5C6A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:46 2025 by rpki-client